$TPMStatus = Get-Tpm
if ($TPMStatus.TpmPresent -and $TPMStatus.TpmVersion -eq "2.0") {
    $BitLockerStatus = Get-BitLockerVolume -MountPoint "C:"
    if ($BitLockerStatus.VolumeStatus -ne "FullyEncrypted") {
        Enable-BitLocker -MountPoint "C:" -UsedSpaceOnly -SkipHardwareTest -RecoveryPasswordProtector
    }
}